CERT-In Advisory
CIAD-2022-0028
Multiple Vulnerabilities in Apple macOS
Original Issue Date: November 01, 2022
Severity Rating: High
Software Affected
- Apple macOS Ventura prior to 13
- Apple macOS Big Sur prior to 11.7.1
- Apple macOS Monterey prior to 12.6.1
Overview
Multiple vulnerabilities have been reported in Apple products which could allow an attacker to gain elevated privileges, execute arbitrary code, disclose sensitive information, bypass security restriction and cause denial of service (DoS) condition on the targeted system.
Description
Multiple vulnerabilities exist in various components of Apple macOS Ventura, Big Sur and Monterey products.
Successful exploitation of these vulnerabilities could allow the attacker to gain elevated privileges, execute arbitrary code, disclose sensitive information, bypass security restriction and cause denial of service (DoS) condition on the targeted system.
Solution
Apply appropriate software updates as mentioned in the Apple Security updates
https://support.apple.com/en-us/HT213493
https://support.apple.com/en-us/HT213494
https://support.apple.com/en-us/HT213488
Vendor Information
Apple
https://support.apple.com/en-us/HT213493
https://support.apple.com/en-us/HT213494
https://support.apple.com/en-us/HT213488
References
Apple
https://support.apple.com/en-us/HT213493
https://support.apple.com/en-us/HT213494
https://support.apple.com/en-us/HT213488
CVE Name
CVE-2022-42795
CVE-2022-32858
CVE-2022-32898
CVE-2022-32899
CVE-2022-32827
CVE-2022-42789
CVE-2022-42825
CVE-2022-32902
CVE-2022-32904
CVE-2022-32890
CVE-2022-42796
CVE-2022-42798
CVE-2022-32940
CVE-2022-42819
CVE-2022-42813
CVE-2022-26730
CVE-2022-32867
CVE-2022-32205
CVE-2022-32206
CVE-2022-32207
CVE-2022-32208
CVE-2022-42814
CVE-2022-32865
CVE-2022-32915
CVE-2022-32928
CVE-2022-32935
CVE-2022-42788
CVE-2022-32905
CVE-2022-32947
CVE-2022-42809
CVE-2022-3437
CVE-2022-32913
CVE-2022-1622
CVE-2022-32936
CVE-2022-42820
CVE-2022-42806
CVE-2022-32864
CVE-2022-32866
CVE-2022-32911
CVE-2022-32924
CVE-2022-32914
CVE-2022-42808
CVE-2022-32944
CVE-2022-42803
CVE-2022-32926
CVE-2022-42801
CVE-2022-42815
CVE-2022-32883
CVE-2022-32908
CVE-2022-42810
CVE-2021-39537
CVE-2022-29458
CVE-2022-42818
CVE-2022-32879
CVE-2022-32895
CVE-2022-32918
CVE-2022-42829
CVE-2022-42830
CVE-2022-42831
CVE-2022-42832
CVE-2022-28739
CVE-2022-32881
CVE-2022-32862
CVE-2022-42811
CVE-2022-42793
CVE-2022-32938
CVE-2022-42790
CVE-2022-32870
CVE-2022-32934
CVE-2022-42791
CVE-2021-36690
CVE-2022-0261
CVE-2022-0318
CVE-2022-0319
CVE-2022-0351
CVE-2022-0359
CVE-2022-0361
CVE-2022-0368
CVE-2022-0392
CVE-2022-0554
CVE-2022-0572
CVE-2022-0629
CVE-2022-0685
CVE-2022-0714
CVE-2022-0729
CVE-2022-0943
CVE-2022-1381
CVE-2022-1420
CVE-2022-1725
CVE-2022-1616
CVE-2022-1619
CVE-2022-1620
CVE-2022-1621
CVE-2022-1629
CVE-2022-1674
CVE-2022-1733
CVE-2022-1735
CVE-2022-1769
CVE-2022-1927
CVE-2022-1942
CVE-2022-1968
CVE-2022-1851
CVE-2022-1897
CVE-2022-1898
CVE-2022-1720
CVE-2022-2000
CVE-2022-2042
CVE-2022-2124
CVE-2022-2125
CVE-2022-2126
CVE-2022-32875
CVE-2022-32886
CVE-2022-32888
CVE-2022-32912
CVE-2022-42799
CVE-2022-42823
CVE-2022-42824
CVE-2022-32923
CVE-2022-32922
CVE-2022-32892
CVE-2022-37434
CVE-2022-42800
CVE-2022-32941
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information
Email: info@cert-in.org.in Phone: +91-11-24368572
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India
|